Trojan.Starman.6427

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe

Сетевая активность:

Подключается к:

'22#.#13.16.44':139
'22#.#13.206.208':445
'22#.#13.209.48':445
'22#.#13.206.208':139
'22#.#13.16.44':445
'22#.#13.71.168':139
'22#.#13.190.199':139
'22#.#13.36.60':139
'22#.#13.221.171':139
'22#.#13.110.226':445
'22#.#13.147.53':445
'22#.#13.251.202':445
'22#.#13.42.250':445
'22#.#13.205.151':445
'22#.#13.36.242':445
'22#.#13.0.23':445
'22#.#13.119.253':445
'22#.#13.247.30':445
'22#.#13.126.119':445
'22#.#13.15.139':139
'22#.#13.255.35':139
'22#.#13.107.44':139
'22#.#13.165.209':139
'22#.#13.126.61':139
'22#.#13.154.137':139
'22#.#13.167.154':139
'22#.#13.247.37':139
'22#.#13.137.247':139
'22#.#13.154.197':139
'22#.#13.231.148':139
'22#.#13.202.231':139
'22#.#13.224.155':139
'22#.#13.121.125':139
'22#.#13.5.230':139
'22#.#13.106.133':139
'22#.#13.34.167':139
'22#.#13.165.106':139
'22#.#13.21.179':139
'22#.#13.81.17':445
'22#.#13.127.199':445
'22#.#13.215.178':445
'22#.#13.17.140':445
'22#.#13.239.128':445
'22#.#13.24.27':445
'22#.#13.48.24':445
'22#.#13.85.239':445
'22#.#13.173.106':445
'22#.#13.33.224':445
'22#.#13.35.110':445
'22#.#13.153.35':445
'22#.#13.34.246':445
'22#.#13.110.34':445
'22#.#13.211.152':445
'22#.#13.182.211':445
'22#.#13.126.76':445
'22#.#13.235.114':445
'22#.#13.34.11':445
'22#.#13.150.165':445
'22#.#13.56.5':445
'22#.#13.150.211':445
'22#.#13.104.5':445
'22#.#13.46.56':445
'22#.#13.180.44':445
'22#.#13.151.117':445
'22#.#13.224.45':445
'22#.#13.44.224':445
'22#.#13.16.126':445
'22#.#13.39.127':445
'22#.#13.75.185':445
'22#.#13.238.60':445
'22#.#13.192.113':445
'22#.#13.224.152':445
'22#.#13.94.101':445
'22#.#13.121.94':445
'22#.#13.249.112':445
'22#.#13.41.212':445
'22#.#13.73.168':139
'22#.#13.49.143':445
'22#.#13.217.73':445
'22#.#13.73.168':445
'22#.#13.130.66':445
'22#.#13.0.178':445
'22#.#13.134.107':445
'22#.#13.16.114':445
'22#.#13.65.174':445
'22#.#13.134.151':445
'22#.#13.167.154':445
'22#.#13.165.209':445
'22#.#13.15.139':445
'22#.#13.154.197':445
'22#.#13.107.44':445
'22#.#13.255.35':445
'22#.#13.137.247':445
'22#.#13.154.137':445
'22#.#13.126.61':445
'22#.#13.247.37':445
'22#.#13.152.231':445
'22#.#13.18.88':445
'22#.#13.81.115':445
'22#.#13.97.198':445
'22#.#13.43.22':445
'22#.#13.12.21':139
'22#.#13.234.229':139
'22#.#13.240.231':445
'22#.#13.51.26':445
'22#.#13.123.240':445
'22#.#13.199.244':445
'22#.#13.75.222':445
'22#.#13.117.176':445
'22#.#13.163.213':445
'22#.#13.159.251':445
'22#.#13.132.81':445
'22#.#13.5.139':445
'22#.#13.8.91':445
'22#.#13.44.201':445
'22#.#13.159.251':139
'22#.#13.8.91':139
'22#.#13.199.244':139
'22#.#13.75.222':139
'22#.#13.44.201':139
'22#.#13.123.240':139
'22#.#13.81.115':139
'22#.#13.132.81':139
'22#.#13.5.139':139
'22#.#13.163.213':139
'22#.#13.217.73':139
'22#.#13.0.178':139
'22#.#13.130.66':139
'22#.#13.49.143':139
'22#.#13.65.174':139
'22#.#13.16.114':139
'22#.#13.117.176':139
'22#.#13.134.151':139
'22#.#13.134.107':139
'22#.#13.231.148':445
'22#.#13.202.231':445
'22#.#13.224.155':445
'22#.#13.121.125':445
'22#.#13.5.230':445
'22#.#13.106.133':445
'22#.#13.34.167':445
'22#.#13.165.106':445
'22#.#13.21.179':445
'22#.#13.190.199':445
'22#.#13.18.88':139
'22#.#13.43.22':139
'22#.#13.97.198':139
'22#.#13.152.231':139
'22#.#13.240.231':139
'22#.#13.221.171':445
'22#.#13.71.168':445
'22#.#13.51.26':139
'22#.#13.36.60':445
'22#.#13.70.86':139
'22#.#13.166.48':445
'22#.#13.192.186':139
'22#.#13.215.137':139
'22#.#13.122.7':445
'22#.#13.1.150':445
'22#.#13.13.199':445
'22#.#13.215.11':445
'22#.#13.205.101':445
'22#.#13.202.225':139
'22#.#13.251.177':139
'22#.#13.138.186':139
'22#.#13.192.193':139
'22#.#13.66.227':139
'22#.#13.59.162':139
'22#.#13.62.170':139
'22#.#13.225.202':139
'22#.#13.193.8':139
'22#.#13.243.83':139
'22#.#13.111.108':445
'22#.#13.52.125':445
'22#.#13.182.230':445
'22#.#13.78.147':445
'22#.#13.61.98':445
'22#.#13.115.52':445
'22#.#13.111.218':445
'22#.#13.166.38':445
'22#.#13.246.87':445
'22#.#13.74.138':445
'22#.#13.134.6':445
'22#.#13.160.24':445
'22#.#13.53.164':445
'22#.#13.1.65':445
'22#.#13.188.149':445
'22#.#13.143.207':445
'22#.#13.155.205':445
'22#.#13.100.138':445
'22#.#13.207.239':445
'22#.#13.207.239':139
'22#.#13.143.207':139
'22#.#13.188.149':139
'22#.#13.100.138':139
'22#.#13.155.205':139
'22#.#13.78.147':139
'22#.#13.111.108':139
'22#.#13.74.138':139
'22#.#13.182.230':139
'22#.#13.160.24':139
'22#.#13.1.150':139
'22#.#13.122.7':139
'22#.#13.215.11':139
'22#.#13.166.48':139
'22#.#13.205.101':139
'22#.#13.1.65':139
'22#.#13.134.6':139
'22#.#13.13.199':139
'22#.#13.53.164':139
'22#.#13.167.136':139
'22#.213.0.1':139
'22#.#13.126.88':139
'22#.#13.136.126':139
'22#.#13.67.109':139
'22#.#13.170.231':139
'22#.#13.142.95':139
'22#.#13.232.13':139
'22#.#13.228.198':139
'22#.#13.164.244':139
'22#.#13.166.38':139
'22#.#13.115.52':139
'22#.#13.52.125':139
'22#.#13.61.98':139
'22#.#13.246.87':139
'22#.#13.11.219':139
'22#.#13.82.102':139
'22#.#13.111.218':139
'22#.#13.101.131':139
'22#.#13.101.131':445
'22#.#13.224.152':139
'22#.#13.249.112':139
'22#.#13.39.127':139
'22#.#13.75.185':139
'22#.#13.41.212':139
'22#.#13.16.126':139
'22#.#13.150.211':139
'22#.#13.94.101':139
'22#.#13.121.94':139
'22#.#13.192.113':139
'22#.#13.127.199':139
'22#.#13.239.128':139
'22#.#13.17.140':139
'22#.#13.81.17':139
'22#.#13.85.239':139
'22#.#13.48.24':139
'22#.#13.238.60':139
'22#.#13.173.106':139
'22#.#13.24.27':139
'22#.#13.36.242':139
'22#.#13.247.30':139
'22#.#13.147.53':139
'22#.#13.251.202':139
'22#.#13.126.119':139
'22#.#13.110.226':139
'22#.#13.209.48':139
'22#.#13.0.23':139
'22#.#13.119.253':139
'22#.#13.205.151':139
'22#.#13.56.5':139
'22#.#13.46.56':139
'22#.#13.104.5':139
'22#.#13.150.165':139
'22#.#13.224.45':139
'22#.#13.42.250':139
'22#.#13.151.117':139
'22#.#13.44.224':139
'22#.#13.180.44':139
'22#.#13.192.193':445
'22#.#13.66.227':445
'22#.#13.170.231':445
'22#.#13.142.95':445
'22#.#13.138.186':445
'22#.#13.193.8':445
'22#.#13.243.83':445
'22#.#13.251.177':445
'22#.#13.59.162':445
'22#.#13.228.198':445
'22#.#13.164.244':445
'22#.#13.126.88':445
'22#.#13.11.219':445
'22#.#13.82.102':445
'22#.#13.136.126':445
'22#.#13.232.13':445
'22#.#13.67.109':445
'22#.#13.167.136':445
'22#.213.0.1':445
'22#.#13.211.152':139
'22#.#13.235.114':139
'22#.#13.35.110':139
'22#.#13.153.35':139
'22#.#13.34.11':139
'22#.#13.33.224':139
'22#.#13.215.178':139
'22#.#13.182.211':139
'22#.#13.126.76':139
'22#.#13.110.34':139
'22#.#13.202.225':445
'22#.#13.192.186':445
'22#.#13.62.170':445
'22#.#13.225.202':445
'22#.#13.215.137':445
'22#.#13.78.147':9988
'22#.#13.34.246':139
'22#.#13.70.86':445
'22#.#13.143.207':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней